AINewsnow

GitSpawn: Your AI Coding Agent Runs Attacker Code Before You Type Anything

Open a folder with Claude Code and it runs git status before you type anything. It runs before the workspace-trust prompt appears, and on some agents before you have authenticated. A folder that came from somewhere else decides what that command executes. Manifold Security disclosed the flaw in ear…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-12 03:31 · DEV Community — AI
    GitSpawn: Your AI Coding Agent Runs Attacker Code Before You Type Anything

More stories

  1. Jensen Huang resigns as Nvidia CEO amid affair and spy controversy — CSET Georgetown
  2. Microsoft 365 outage disrupts Outlook, Teams and Copilot for over a day — Euronews Next
  3. Anthropic expands Claude into a full workspace with Sheets, Whiteboards, Meetings and manufacturing tools — Anthropic (X)
  4. Anthropic launches Claude Fable 5.2 and Claude Mythos 5.2 — DEV Community — AI
  5. Anthropic launches self-hosted Claude Managed Agents in private beta — Anthropic (X)
  6. Anthropic launches Claude Fable 5.2 and Mythos 5.2 as model race intensifies — AWS Machine Learning Blog
  7. Anthropic prepares IPO at valuation below once-touted $2 trillion — Reuters AI
  8. Mariko Mori uses Claude to create animation for retrospective 'All That Shines' — Anthropic (X)

Get the daily brief of stories like this at 6:30 every morning →